Lucene search

K
nvd[email protected]NVD:CVE-2023-28697
HistoryApr 27, 2023 - 2:15 a.m.

CVE-2023-28697

2023-04-2702:15:09
CWE-306
web.nvd.nist.gov
moxa miineport e1
insufficient access control
vulnerability
remote user
arbitrary system operation
disrupt service

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitrary system operation or disrupt service.

Affected configurations

NVD
Node
moxamiineport_e1Match-
AND
moxamiineport_e1_firmwareMatch1.7.2

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

Related for NVD:CVE-2023-28697